aboutsummaryrefslogtreecommitdiffstats
path: root/hosts/by-name/server2/configuration.nix
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--hosts/by-name/server2/configuration.nix31
1 files changed, 31 insertions, 0 deletions
diff --git a/hosts/by-name/server2/configuration.nix b/hosts/by-name/server2/configuration.nix
index 5fe635a..cbc1ff3 100644
--- a/hosts/by-name/server2/configuration.nix
+++ b/hosts/by-name/server2/configuration.nix
@@ -57,6 +57,37 @@
enable = true;
fqdn = "mail.foss-syndicate.org";
};
+ stalwart-mail = {
+ enable = true;
+ fqdn = "mail.vhack.eu";
+ admin = "admin@vhack.eu";
+ security = {
+ dkimKeys = let
+ loadKey = name: {
+ dkimPublicKey = builtins.readFile (./secrets/dkim + "/${name}/public");
+ dkimPrivateKeyPath = ./secrets/dkim + "/${name}/private.age";
+ keyAlgorithm = "ed25519-sha256";
+ };
+ in {
+ "mail.vhack.eu" = loadKey "vhack.eu";
+ };
+ verificationMode = "strict";
+ };
+ openFirewall = true;
+ principals = [
+ {
+ class = "individual";
+ name = "soispha";
+ secret = "$2b$05$XX36sJuHNbTFvi8DFldscOeQBHahluSkiUqD9QGzQaET7NJusSuQW";
+ email = [
+ "soispha@vhack.eu"
+ "abuse@vhack.eu"
+ "postmaster@vhack.eu"
+ "admin@vhack.eu"
+ ];
+ }
+ ];
+ };
nginx = {
enable = true;
redirects = {